Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/D055D382225711EF975F6747C4F9AE02.roa
File:                     D055D382225711EF975F6747C4F9AE02.roa (raw, json)
Hash identifier:          2DIbbbQohcgsUM76Q6xBDUsyKlfYgqXTFBRbG6OVDKI=
Subject key identifier:   57:04:7A:1D:57:74:EB:BE:6A:FC:2E:3F:D8:A9:2A:A4:EF:68:9A:D0
Certificate issuer:       /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
Certificate serial:       CB
Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/D055D382225711EF975F6747C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 06:44:00 +0000
ROA not before:           Tue 01 Jul 2025 06:44:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152898
IP address blocks:        160.22.50.0/24 maxlen: 24
                          160.22.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl
                          rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15
        Validity
            Not Before: Jul  1 06:44:00 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686383b0-6475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:c4:2a:51:cb:bf:5a:4e:71:4f:38:bd:5b:
                    81:44:8c:8a:a0:7a:e8:d9:ad:db:36:54:e1:30:92:
                    52:61:15:d6:cf:12:05:80:da:47:dc:51:5c:8b:8f:
                    aa:df:ee:a6:41:1d:44:58:b0:84:e4:6f:3e:51:bd:
                    05:6a:77:fe:1a:3b:fa:47:cf:65:85:e6:f2:fd:55:
                    0b:00:bd:ee:e4:ec:24:e0:7f:a9:52:3e:0f:25:17:
                    5e:94:3a:e4:a7:c1:86:32:f3:43:2d:7c:32:87:51:
                    4e:c9:0d:9b:ac:8f:c0:67:64:0a:4a:a0:5e:34:13:
                    49:96:2b:82:73:9d:57:63:e7:dc:c4:55:bc:f8:14:
                    f7:50:74:33:60:9b:b5:ff:47:80:c8:87:7b:1d:82:
                    e9:d8:58:ea:d5:f8:37:10:a0:7f:82:78:64:3e:9b:
                    9a:08:ce:01:07:74:5d:32:af:4c:79:46:bd:05:db:
                    af:3f:ad:f8:45:6f:4c:b9:f5:d3:ee:1d:9c:e5:59:
                    8e:70:a2:c4:22:dd:06:a0:1b:f4:59:81:d6:d9:8a:
                    10:3f:c1:6b:e6:87:35:4e:17:a1:06:40:ce:58:0b:
                    3c:c0:12:6b:08:43:4c:79:73:6b:c1:9f:9b:8c:74:
                    fa:66:ff:25:9f:bf:d9:92:11:92:04:8d:24:78:9b:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:04:7A:1D:57:74:EB:BE:6A:FC:2E:3F:D8:A9:2A:A4:EF:68:9A:D0
            X509v3 Authority Key Identifier:
                keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/D055D382225711EF975F6747C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:58:e1:9b:ae:ba:98:8a:c9:f3:88:06:3f:32:f1:e6:1a:92:
         95:6b:17:8e:4a:7a:4b:85:a3:4f:ed:b4:94:4f:b3:37:a1:e0:
         9f:0a:b0:d1:24:5a:62:cb:32:17:1f:2f:fa:97:dc:40:e6:98:
         9e:ac:25:ce:3f:6a:ae:bf:db:1f:c1:93:5b:c6:2a:c7:bd:bb:
         f1:06:98:cf:b0:1c:9c:e7:80:43:8a:48:7f:83:5f:5d:8c:65:
         73:97:fb:4c:79:60:f0:9e:d2:8f:3b:60:ea:4c:1e:f4:72:07:
         ad:25:2d:e2:d6:5b:67:20:b4:bf:ba:70:8f:dc:04:e1:e4:6d:
         64:68:99:8d:a4:84:68:6f:65:04:ff:71:7d:84:3a:a1:2c:bc:
         1f:67:fd:91:46:eb:9e:36:91:b5:f0:f7:8f:ad:be:c9:5f:bc:
         7b:16:3d:0f:29:9b:e1:8b:70:96:d5:14:a4:11:87:af:ee:48:
         41:30:23:97:2a:ce:e5:cf:e8:a0:9a:99:ba:cc:93:c4:7e:00:
         dc:6f:b8:24:77:53:20:6c:30:ff:4d:ae:32:c5:cb:a5:d2:fe:
         d7:fc:8e:2c:4f:29:ad:83:fb:51:2c:77:a4:9c:b3:3d:0a:05:
         03:00:be:c1:cd:0d:cd:be:6b:22:fe:3c:1a:9c:5b:13:73:36:
         44:21:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:15:21 2025 by rpki-client